IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Use
UTF–8
encoding
for
tokens
used
in
cross
domain
single
sign-on.
Beginning
with
Version
5.1,
WebSEAL
servers
use
UTF-8
encoding
by
default.
When
this
stanza
entry
is
set
to
true,
tokens
can
be
exchanged
with
other
WebSEAL
servers
that
use
UTF-8
encoding.
This
enables
tokens
to
used
across
different
code
pages
(such
as
for
a
different
language).
For
backwards
compatibility
with
tokens
created
by
WebSEAL
servers
from
version
prior
to
5.1,
set
this
stanza
entry
to
false.
This
stanza
entry
is
required.
Default:
true
Example:
use-utf8
=
true
See
also
“Multi-locale
support
with
UTF-8”
on
page
44.
[cdsso-peers]
stanza
fully_qualified_hostname
=
fully_qualified
_path
List
of
peer
servers
that
are
participating
in
cross-domain
single-sign
on.
The
path
name
must
specify
the
location
of
server’s
key
file.
This
stanza
entry
is
optional.
There
is
no
default
value
Example:
webhost2.ibm.com
=
/tmp/cdsso.key
[cdsso-token-attributes]
stanza
domain_name
=
pattern1
[pattern2,]
[patternN,
....
]
Credential
attributes
to
include
in
CDSSO
authentication
tokens.
The
domain_name
specifies
the
destination
domain
containing
the
server
that
will
consume
the
token.
The
value
for
domain_name
can
be
one
or
more
entries.
The
value
can
be
either
a
specific
value
or
can
be
a
pattern
that
uses
standard
Tivoli
Access
Manager
wildcard
characters
(
*,
[],
^,
\,
?).
This
stanza
entry
is
optional.
There
is
no
default
value
Example:
example1.com
=
my_cdas_attr_*
=
pattern1
[pattern2,]
[patternN,
....
]
Credential
attributes
to
include
in
CDSSO
authentication
tokens.
When
WebSEAL
cannot
find
a
domain_name
entry
to
match
the
domain,
the
entries
in
are
used.
The
word
is
a
key
word
and
must
not
be
modified.
This
stanza
entry
is
optional.
There
is
no
default
value
Example:
=
my_cdas_attr_*
[cdsso-incoming-attributes]
stanza
Appendix
A.
WebSEAL
configuration
file
reference
429